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In the Claims : 

1. (Original) A method of access to a service with fast authentication and 
revocable anonymity, characterized in that it comprises the steps of: 

i) identifying and registering a client (C) and providing him with means 
for authenticating himself to an anonymous certification authority (ACA), 

ii) authenticating the client to the anonymous certification authority 
using the means provided in step i) and supplying means enabling him to authenticate 
himself anonymously to a server (Se), 

iii) authenticating the client by producing an anonymous signature and 
opening and maintaining an anonymous authentication session with a server (Se), 
and 

iv) selectively allowing contact between the server (Se) and the 
anonymous certification authority (ACA) to revoke the anonymity of the client (C) 
using the signature provided in step iii). 

2. (Original) A method according to claim 1, characterized in that it comprises, 
before the step ii), an additional step of communication between the anonymous 
certification authority (ACA) and the server (Se) whereby the server (Se) presents to 
said authority (ACA) a request to obtain means enabling verification of the 
anonymous authentication supplied by a client (C). 
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3. (Currently amended) A method according to claim 1 or claim 2 , 
characterized in that the step iii) comprises three stages: 

a first stage in which the client (C) calculates data formed of a series of 
tokens of which one enables a session to be opened and the others enable that session 
to be maintained, 

a second stage in which the client (C) makes a strong undertaking to the 
server as to the series of tokens, and 

a third stage of maintaining the session with the aid of the series of tokens. 

4. (Original) A method according to claim 3, characterized in that all the 
tokens are for one-time use and strongly interdependent. 

5. (Currently amended) A method according to e ith e r claim 3 or claim 4, 
characterized in that the token generation step uses two cryptographic primitives, 
namely a hashing function and a random number. 

6. (Original) A method according to claim 5, characterized in that the first 
token is obtained by applying the hashing function to the random number, the second 
token is obtained by applying the hashing function to the first token obtained, and so 
on until n tokens are obtained: 

H(W 0 ) = W 1 H(W n . 1 ) = W n 
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7. (Currently amended) A method according to any ono of claims 3 te-6 
claim 3 , characterized in that the second stage includes obtaining an anonymous 
signature of an initialization token W~ enabling authentication of a client by the 
server. 

8. (Currently amended) A method according to any one of claims 3 to 7 
claim 3 , characterized in that information such as a numerical value is associated 
with the initialization token. 

9. (Currently amended) A method according to any on e of claims 3 to 8 
claim 3 , characterized in that on each new authentication the client (C) sends the 
server (Se) a token of at least one unit lower rank than that Previously used. 

10. (Currently amended) A method according to any on e of claims 3 to 9 
claim 3 , characterized in that on each new authentication the client (C) sends the 
server (Se) a token Wi whose rank (i) is selected to be representative of the value of 
an operation, for example a number of bid increments. 

1 1 . (Currently amended) A method according to any one of claims 1 to 10 , 
claim 1 characterized in that it is applied to bidding and the steps of the client (C) 
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submitting an increased bid are effected by sending successive tokens of lower rank. 

12. (Currently amended) A method according to any on e of claims 1 to 11 , 
claim 1 characterized in that it uses a group signature by associating a plurality of 
identifiers and respective private keys with a single group public key. 

13. (Currently amended) A method according to any one of claims 1 to 12 , 
claim 1 characterized in that it uses a blind signature. 

14. (Currently amended) A method according to e ith e r claim 12 or claim 13 , 
characterized in that the powers to revoke anonymity are divided between two or 
more authorities. 

15. (Original) A system adapted to open and maintain an authentication 
session guaranteeing non-repudiation, characterized in that it comprises means 
adapted to implement three stages: 

a first stage in which the client (C) calculates data formed of a series of 
tokens of which one enables a session to be opened and the others enable that session 
to be maintained, 

a second stage in which the client (C) makes a strong undertaking to the 
server as to the series of tokens, and 

a third stage of maintaining the session with the aid of the series of tokens. 
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16. (Original) A method according to claim 15, characterized in that the 
token generation step uses two cryptographic primitives, namely a hashing function 
and a random number. 

17. (Original) A method according to either claim 15 or claim 16 , characterized 
in that it uses a group signature by associating a plurality of identifiers and respective 
private keys with a single group public key. 

18. (Currently amended) A method according to any on e of claims claim 15 te 
4-7, characterized in that it uses a blind signature. 

19. (Currently amended) A method according to any on e of claims claim 15 te 
4-8, characterized in that the powers to revoke anonymity are divided between two or more 
authorities. 
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